Re: Disabling trust/ident authentication configure option

From: Robert Haas <robertmhaas(at)gmail(dot)com>
To: Andrew Dunstan <andrew(at)dunslane(dot)net>
Cc: Alvaro Herrera <alvherre(at)2ndquadrant(dot)com>, Volker Aßmann <volker(dot)assmann(at)gmail(dot)com>, "pgsql-hackers(at)postgresql(dot)org" <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Disabling trust/ident authentication configure option
Date: 2015-05-06 20:19:19
Message-ID: CA+TgmoZMX3FvHnnXcuiTTuh=6WY2uW6=QmRWkkNdUwD1T5Zh6g@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

On Wed, May 6, 2015 at 3:57 PM, Andrew Dunstan <andrew(at)dunslane(dot)net> wrote:
> I don't necessarily object to this idea, but I do think we need to ensure
> that we don't allow both trust and peer to be disabled (which means on
> Windows you would not be able to disable trust). Otherwise this becomes a
> footgun which would require the whole server to be stopped so you could
> connect in single user mode to correct certain mistakes, which are
> unfortunately all too common.

Of course that's precisely what the OP wanted to do, which goes to my
point that not everybody's going to want the same thing.

--
Robert Haas
EnterpriseDB: http://www.enterprisedb.com
The Enterprise PostgreSQL Company

In response to

Responses

Browse pgsql-hackers by date

  From Date Subject
Next Message Andres Freund 2015-05-06 20:22:24 Re: INSERT ... ON CONFLICT syntax issues
Previous Message Andres Freund 2015-05-06 20:16:04 Re: INSERT ... ON CONFLICT UPDATE/IGNORE 4.0